REALLY Annoying - Buydomains.com

jabaroon

Hi All,

Anytime I enter a URL into my browser (IE6.0) that is incorrect, I get sent to buydomains.com

For example, if I type in http://www.fgsdfsdfsdjh.com, the buydomains.com home page shows (with the original URL still in the URL bar).

When close the page, a popup to http://www.seeq.com/popupwrapper.jsp?domain=fgsdfsdfsdjh.com

comes up in a new windows and asks me if I want to set it to my homepage.

I have run Norton, Ad Aware and SpyBot Search and Destroy, but none of them have corrected the problem!....

I have a second PC that isn't infected, it does what you would expect -- it simply redirects to the standard domain not found page.

Anyone got any ideas?

Ta,
Jab

RobertFoster

I googled it (like always...) try this:

start > run > type "regedit" (w/o "") > return

when that opens up go edit > find and type in "buydomains" (w/o "") and see if anything comes up...


http://www.mcse.ms/archive167-2004-3-450278.html

Mr E

Try following the steps here: http://spyware.surferbeware.com/browser-hijack.htm

jabaroon

RobertFoster, I have checked through the registry and there is no mention.

TimB, followed all of the steps in the URL, but still no joy?!

Any more ideas?

Ta,
Jab

RobertFoster

Get Firefox

maxheadroom

What version of Windows?

jabaroon

Max, im on Win2K....
C'mon, if anyone can help, plz let me know...this is really P***ing me off.....
Ta,
Jab

maxheadroom

Open a command prompt, type in:

ipconfig /all

Look for a line that says

Connection-specific DNS Suffix   :

In the section dealing with your network adapter. It should be blank. Let me know what it says?

Is this on broadband or dialup?

jabaroon

hey max,

Done that and it gives the name of my PC, which I set during install. The name itself is a junk .com that I setup. Its not blank. Is this the problem?

Ta,
Jab

maxheadroom

probably - your computer thinks its on that domain, so if you type in a URI that won't resolve, it then tries URI.junkdomain.com. Try clearing the connection specific suffix by right clicking on the network connection, select TCPIP, properties. Click advanced, select the DNs tab, then clear the box that says "DNS suffix for this connection"

NOTE: these instructions are from XP pro, things might be laid out slightly differently on 2K

jabaroon

WORKED !!!!

You star!!

Cheers,
Jab

maxheadroom

np - glad to help. I had to get rid of a nasty variant of lop.com once which did this on purpose...

Cabaal

1. Install Mozilla flavour
2. Problem solved

Mozilla - http://www.mozilla.org